This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Threat actors are conducting widespread investment fraud campaigns on Meta platforms by using AI-generated deepfake videos to impersonate prominent financial experts and institutions. These scams lure users into WhatsApp investment groups, resulting in significant financial losses for victims. Despite reports to social media platforms, the ads often persist, highlighting challenges in moderation and the increasing sophistication of AI-enabled financial crime.
A purportedly AI-generated video of Bank of Montreal Chief Investment Strategist Brian Belski was used in an alleged fraudulent investment ad campaign on Meta platforms, including Instagram and Facebook. The ads reportedly impersonated Belski to promote a WhatsApp investment group. BMO confirmed the impersonation and warned users; the Facebook page was reportedly renamed and repurposed by scammers.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The deepfake videos generate false and misleading investment advice to deceive users.
The incident involves threat actors using AI-generated deepfake videos of financial experts to run highly convincing investment scams and defraud individual investors.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The risk is caused by human threat actors intentionally deploying AI deepfake generation tools post-deployment to commit financial fraud.
Added categories peak at 3: Substantial (Epistemic Harm, Inferred)
Threat actors used AI-generated deepfakes of financial experts to conduct widespread investment fraud targeting Canadian and European citizens. While the incident caused significant individual financial losses and highlights content moderation challenges, its national security impact remains minor as it does not target critical infrastructure, state sovereignty, or systemic financial stability.
The AI systems were used by threat actors as tools to generate realistic deepfake videos and cloned voices of financial experts. The reports describe these as 'AI-generated deepfake videos' and 'AI-powered deepfake videos' used to create content, which fits the definition of a Tool performing specific, well-defined functions based on direct input.
Limited Risk: The report describes 'AI-generated deepfake videos' and 'AI-powered deepfake videos' used to impersonate financial experts. According to the definitions, Limited Risk includes 'AI-generated content such as deepfakes' which require transparency obligations.
The AI was primarily used to generate highly realistic deepfake videos of financial experts, as well as cloning their voices to deliver fake investment advice.
The reports provide clear, detailed accounts of the deepfake scams, the specific individuals and institutions targeted, the platforms used, and the financial impact. The role of AI (deepfake generation) is explicitly stated, and the classification of the incident as financial fraud (4.3) is highly straightforward.
None. The incident is clearly a case of AI-enabled financial fraud.
Technology
AI Deepfake Video Generation
Scammers used AI to generate highly realistic videos of financial experts.
Ad Platform Loophole
Meta allowed running Instagram ads without an active Instagram profile.
Lack of Proactive AI Filters
No automated tools were active to detect deepfakes before they were published.
Data Inputs
Scraped Public Personas
Scammers scraped public web data of legitimate finance professionals.
Repurposed Facebook Pages
Stolen or renamed pages were reused to bypass new-account red flags.
Lookalike Phishing Domains
Scammers used counterfeit domains mimicking real bank brands.
Human Factors
Trust in Public Figures
Victims trusted realistic deepfakes of renowned investment experts.
Search for High Yields
Low interest rates motivated investors to seek riskier, fake opportunities.
Process and Methods
Delayed Takedown Response
Platforms took days to remove ads even after receiving direct reports.
Reactive Moderation Process
Moderation relied on user reports rather than proactive detection.
Management
Inadequate Pre-Ad Screening
Management failed to verify identity of ad accounts before publishing.
Underfunded Ad Verification
Platforms did not allocate enough resources to verify advertiser identity.
Regulatory Environment
Safe Harbour Protections
Platforms face limited liability for host content under safe harbour laws.
Foreign Jurisdiction Scams
Scammers operate from regions hostile to local law enforcement.
Lagging Prevention Systems
Canada lacks unified national fraud-fighting agencies like peers.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
